I don't see why she should have to put her company's code out on the web for veryone to see if she doesn't want to. It is hers (or theirs) and there is no reason she should be bound by some supposed "Dissemination of information requirement" in order to help someone out.
since I just emailed the guy who wrote the code and he informed me that it just does a DNS lookup to validate the domain and doesn't validate individual user accounts on the domain like I previously thought. So I guess I am today's biggest dork and most detested "boardie". Sorry. How many days do I have to get out of town?